2026-08-05_eb6fad17fd2647cbc9e75f78a12068d8_darkgate_elex_maze

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-05_eb6fad17fd2647cbc9e75f78a12068d8_darkgate_elex_maze
Size 2.1MB
Sample260805-b43pcss1ht
SHA256 62d0ffbbe3de0571c089eab5962a922e138a98a05167dd2157ca3ed7523d3a54
MD5 eb6fad17fd2647cbc9e75f78a12068d8
SHA1 56312cf7b5c96ed5b51730f60837c4a4659cb3be
SHA512 488235864c2639560a1b1b5e391879328992c4738c203ff5cb1704145c4c171a9b03d2f09d4c7d5838f1f553b65278439cf54900b0ff3c86320c57191105f9a3
SSDEEP 49152:9pArGejiJtzyUbKlt7yGWlJqTPcI0D4VOpV5f:7ArGej0GEicHD4V
TLSH
T129A59D22FA01C07AE5D1117192BDBB7B887C1739032958D3A7D01CB97D60DE36B79B8A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-05_eb6fad17fd2647cbc9e75f78a12068d8_darkgate_elex_maze

File Explorer

2026-08-05_eb6fad17fd2647cbc9e75f78a12068d8_darkgate_elex_maze

.exe 2.1MB

2026-08-05_eb6fad17fd2647cbc9e75f78a12068d8_darkgate_elex_maze

IMPHASH ee8c950120cceb7ed57091d0222dce40
SHA256 62d0ffbbe3de0571c089eab5962a922e138a98a05167dd2157ca3ed7523d3a54
MD5 eb6fad17fd2647cbc9e75f78a12068d8
SHA1 56312cf7b5c96ed5b51730f60837c4a4659cb3be
SHA512 488235864c2639560a1b1b5e391879328992c4738c203ff5cb1704145c4c171a9b03d2f09d4c7d5838f1f553b65278439cf54900b0ff3c86320c57191105f9a3
SSDEEP 49152:9pArGejiJtzyUbKlt7yGWlJqTPcI0D4VOpV5f:7ArGej0GEicHD4V
TLSH
T129A59D22FA01C07AE5D1117192BDBB7B887C1739032958D3A7D01CB97D60DE36B79B8A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1428948

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

P:\build\_game_win\madbox\Win32\Release_CE\Game_r.pdb

shlwapi

PathRemoveFileSpecW

winmm

timeGetTime

opengl32

glEnableClientState glColorPointer glDrawArrays wglDeleteContext glHint wglGetProcAddress glTranslatef glViewport glScalef glRotatef wglMakeCurrent glGetString glScissor glOrtho glClearColor glClear wglCreateContext glGetIntegerv glLoadIdentity glGenTextures glMatrixMode glPushMatrix glPopMatrix glTexParameteri glShadeModel glDisable glTexImage2D glBindTexture glPixelStorei glTexSubImage2D glDeleteTextures glEnable glTexCoordPointer glVertexPointer glBlendFunc glColor4f

dsound

ord1

wininet

InternetGetConnectedState

kernel32

GetStdHandle ReadFile PeekNamedPipe LoadLibraryA ExpandEnvironmentStringsA CreateMutexW TerminateThread ReleaseMutex EncodePointer DecodePointer HeapFree IsDebuggerPresent IsProcessorFeaturePresent ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar WideCharToMultiByte HeapAlloc RtlUnwind HeapReAlloc GetSystemTimeAsFileTime FindFirstFileExW FindNextFileW FindClose SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SetEnvironmentVariableA SetCurrentDirectoryA GetCurrentDirectoryA GetFileType WaitForMultipleObjects WaitForSingleObject SetUnhandledExceptionFilter GetCurrentProcess LoadLibraryW GetModuleFileNameW CreateFileW GetLastError GetProcAddress GetCurrentThreadId CloseHandle GetCurrentProcessId FreeLibrary GetLocalTime Sleep InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection SystemTimeToFileTime VerSetConditionMask FormatMessageA CreateDirectoryW GetModuleHandleW GetCurrentThread GetFileAttributesW VerifyVersionInfoW QueryPerformanceFrequency OutputDebugStringA SetThreadAffinityMask GetSystemTime WaitForSingleObjectEx SetThreadPriority CreateThread SetEndOfFile GetCurrentDirectoryW GetFullPathNameW GetStringTypeW LCMapStringW CompareStringW OutputDebugStringW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetModuleFileNameA GetDriveTypeW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter HeapSize DeleteFileW GetConsoleCP WriteFile FlushFileBuffers GetProcessHeap RaiseException GetCPInfo GetOEMCP GetACP IsValidCodePage ReadConsoleW GetConsoleMode GetStartupInfoW WriteConsoleW GetTempPathA GetTimeZoneInformation GetFileInformationByHandle VerifyVersionInfoA SleepEx SetLastError QueryPerformanceCounter GetCommandLineA ExitThread LoadLibraryExW FileTimeToLocalFileTime SetFilePointerEx GetTickCount

user32

UnregisterClassW UpdateWindow SendMessageW CreateWindowExW ClipCursor ShowWindow SetWindowPos RedrawWindow SetWindowLongW ReleaseDC PeekMessageW SystemParametersInfoW GetWindowLongW SetRect RegisterClassExW TranslateMessage GetDC GetClassInfoExW SetFocus GetClientRect SetForegroundWindow PostMessageW ChangeDisplaySettingsW DestroyCursor LoadImageW SetCursor GetSystemMetrics GetCursorPos SetCursorPos GetAsyncKeyState GetForegroundWindow ShowCursor GetKeyState ScreenToClient ClientToScreen GetDesktopWindow MessageBoxA LoadIconW DispatchMessageW EnumDisplaySettingsW DefWindowProcW DestroyWindow GetMessageW PostQuitMessage AdjustWindowRect

gdi32

ChoosePixelFormat SwapBuffers SetPixelFormat

shell32

SHGetSpecialFolderPathW ShellExecuteW

ws2_32

WSAStartup WSACleanup WSAGetLastError __WSAFDIsSet WSASetLastError recv send bind closesocket connect getpeername getsockname getsockopt htons ntohs setsockopt socket WSAIoctl getaddrinfo freeaddrinfo accept listen recvfrom sendto ioctlsocket gethostname select

wldap32

ord143 ord46 ord211 ord60 ord41 ord22 ord26 ord27 ord32 ord33 ord35 ord79 ord30 ord200 ord301 ord50

advapi32

CryptAcquireContextA CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-05_eb6fad17fd2647cbc9e75f78a12068d8_darkgate_elex_maze

shlwapi

winmm

opengl32

dsound

wininet

kernel32

user32

gdi32

shell32

ws2_32

wldap32

advapi32

generic